Outt
Sett
Behavioral task
behavioral1
Sample
f9c3bcde8ce8405943b79c1fe93823c6_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f9c3bcde8ce8405943b79c1fe93823c6_JaffaCakes118
Size
61KB
MD5
f9c3bcde8ce8405943b79c1fe93823c6
SHA1
e459df510b88097b0080c5770e224b21a9423202
SHA256
d3235f4230236dfa2bdd63a907355ebaa3791b25275374a2de9be7a170d8fde7
SHA512
f49389bde52db6939cdc386b3b8731c1e45fb2d50c77b1bb97357268e661b88154ae1dd410cc3ce65fdc67d724aab3120af75a527c6cbfa3f272b7866a2ae1eb
SSDEEP
1536:MhBRVgrExucMePbIyS7WBdgPG1/2JxwXJYbElnquMfa7ZDR1:cRRsMbIvWBdge1uXfbEl9Msb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f9c3bcde8ce8405943b79c1fe93823c6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ